Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
45 of your 162 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 11.38s · analysis 9.13s · 24.1 MB · GitHub API rate-limit (preflight)

ulsklyc/oikos

https://github.com/ulsklyc/oikos · scanned 2026-06-05 16:59 UTC (5 days ago) · 10 languages

526 raw signals (156 security + 370 graph) 48th percentile · Javascript · medium (20-100K LoC) System graph score 54 (higher by 13)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days ago · v2 · 250 actionable findings from 2 signal sources. 91 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
55.5
/100
Security checks
57
96 findings
System graph
54
100.0% cov · 154 findings
Critical
22
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 75.0 0.15 11.25
security_score 28.2 0.25 7.05
testing_score 90.0 0.20 18.00
documentation_score 94.6 0.15 14.19
practices_score 84.0 0.15 12.60
code_quality 43.9 0.10 4.39
Overall 1.00 67.5
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 22 High 67 Medium 19 Low 114 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 96 System graph 154 Crowd 0 Layer: Quality 75 Security 59 Cicd 12 Software 21 Frontend 26 Network 1 Hardware 3 Api 53

All 2042 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
getLocalIP software healthy setup.js:getLocalIP
prompt software healthy setup.js:prompt
promptPassword software healthy setup.js:promptPassword
handler software healthy setup.js:handler
main software healthy setup.js:main
username software healthy setup.js:username
displayName software healthy setup.js:displayName
withServer software healthy test/test-installer-static.js:withServer
test software healthy test/test-shopping.js:test
assert software healthy test/test-shopping.js:assert
test software healthy test/test-dashboard.js:test
assert software healthy test/test-dashboard.js:assert
insertEvent software healthy test/test-dashboard.js:insertEvent
isoIn software healthy test/test-dashboard.js:isoIn
cookieHeader software healthy test/test-setup.js:cookieHeader
_makeSvgEl software healthy test/test-modal-utils.js:_makeSvgEl
makeField software healthy test/test-modal-utils.js:makeField
makeInput software healthy test/test-modal-utils.js:makeInput
makeContainer software healthy test/test-modal-utils.js:makeContainer
makeBtn software healthy test/test-modal-utils.js:makeBtn
test software healthy test/test-reminders.js:test
assert software healthy test/test-reminders.js:assert
runSQL software healthy test/test-reminders.js:runSQL
test software healthy test/test-calendar.js:test
assert software healthy test/test-calendar.js:assert
getMondayOf software healthy test/test-calendar.js:getMondayOf
diff software healthy test/test-calendar.js:diff
addDays software healthy test/test-calendar.js:addDays
test software healthy test/test-ics-subscription.js:test
assert software healthy test/test-ics-subscription.js:assert
test software healthy test/test-budget-recurrence.js:test
assert software healthy test/test-budget-recurrence.js:assert
freshDb software healthy test/test-budget-recurrence.js:freshDb
insertParent software healthy test/test-budget-recurrence.js:insertParent
instances software healthy test/test-budget-recurrence.js:instances
instanceIn software healthy test/test-budget-recurrence.js:instanceIn
db software healthy test/test-google-calendar.js:db
test software healthy test/test-google-calendar.js:test
assert software healthy test/test-google-calendar.js:assert
assertEqual software healthy test/test-google-calendar.js:assertEqual
cfgGet software healthy test/test-google-calendar.js:cfgGet
test software healthy test/test-tasks.js:test
assert software healthy test/test-tasks.js:assert
makeFixture software healthy test/test-truenas-generate.js:makeFixture
read software healthy test/test-frontend-audit.js:read
walkJsFiles software healthy test/test-frontend-audit.js:walkJsFiles
walkFrontendFiles software healthy test/test-frontend-audit.js:walkFrontendFiles
resolveLocaleKey software healthy test/test-frontend-audit.js:resolveLocaleKey
assertKeysExistInEveryLocale software healthy test/test-frontend-audit.js:assertKeysExistInEveryLocale
cssRuleBody software healthy test/test-frontend-audit.js:cssRuleBody

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
setup.js software healthy setup.js
podman-compose.yml software healthy podman-compose.yml
MODULES.md software healthy MODULES.md
README.md software healthy README.md
install.sh software healthy install.sh
package.json software healthy package.json
CONTRIBUTING.md software healthy CONTRIBUTING.md
Dockerfile software healthy Dockerfile
package-lock.json software healthy package-lock.json
SECURITY_RESEARCH.md software healthy SECURITY_RESEARCH.md
.env.example software healthy .env.example
CODE_OF_CONDUCT.md software healthy CODE_OF_CONDUCT.md
SECURITY.md software healthy SECURITY.md
CHANGELOG.md software healthy CHANGELOG.md
docker-compose.yml software healthy docker-compose.yml
entrypoint.sh software healthy entrypoint.sh
BACKLOG.md software healthy BACKLOG.md
test-installer-static.js software healthy test/test-installer-static.js
test-shopping.js software healthy test/test-shopping.js
test-dashboard.js software healthy test/test-dashboard.js
test-setup.js software healthy test/test-setup.js
test-caldav-sync.js software warning test/test-caldav-sync.js
test-modal-utils.js software healthy test/test-modal-utils.js
test-reminders.js software healthy test/test-reminders.js
test-calendar.js software healthy test/test-calendar.js
test-ics-subscription.js software healthy test/test-ics-subscription.js
test-budget-recurrence.js software healthy test/test-budget-recurrence.js
test-google-calendar.js software healthy test/test-google-calendar.js
test-tasks.js software healthy test/test-tasks.js
test-truenas-generate.js software healthy test/test-truenas-generate.js
test-frontend-audit.js software healthy test/test-frontend-audit.js
test-installer-cli-i18n.js software healthy test/test-installer-cli-i18n.js
test-api.js software healthy test/test-api.js
test-ux-utils.js software warning test/test-ux-utils.js
test-db.js software healthy test/test-db.js
test-google-multi.js software healthy test/test-google-multi.js
test-installer-a11y.js software healthy test/test-installer-a11y.js
test-date-utils.js software warning test/test-date-utils.js
test-oidc.js software healthy test/test-oidc.js
test-meals.js software healthy test/test-meals.js
test-carddav.js software warning test/test-carddav.js
test-family-contacts.js software healthy test/test-family-contacts.js
test-installer-prereq.js software healthy test/test-installer-prereq.js
test-mobile-scroll-layout.js software healthy test/test-mobile-scroll-layout.js
test-installer-env-write.js software healthy test/test-installer-env-write.js
test-housekeeping.js software healthy test/test-housekeeping.js
test-notes-contacts-budget.js software healthy test/test-notes-contacts-budget.js
test-installer-schema.js software warning test/test-installer-schema.js
test-installer-i18n.js software healthy test/test-installer-i18n.js
test-backup-scheduler.js software healthy test/test-backup-scheduler.js

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
POST /login api healthy server/auth.js
POST /logout api healthy server/auth.js
GET /oidc/config api healthy server/auth.js
GET /oidc/start api healthy server/auth.js
GET /oidc/callback api healthy server/auth.js
POST /setup api healthy server/auth.js
GET /me api healthy server/auth.js
GET /users api healthy server/auth.js
GET /api-tokens api healthy server/auth.js
POST /api-tokens api healthy server/auth.js
DELETE /api-tokens/:id api healthy server/auth.js
POST /users api healthy server/auth.js
PATCH /users/:id api healthy server/auth.js
PATCH /me/profile api healthy server/auth.js
PATCH /me/password api healthy server/auth.js
DELETE /users/:id api healthy server/auth.js
USE /api/ api healthy server/index.js
USE /api/v1/auth api healthy server/index.js
GET /api/v1/version api healthy server/index.js
GET /manifest.webmanifest api healthy server/index.js
GET /api/v1/openapi.json api healthy server/index.js
GET /openapi.json api healthy server/index.js
USE /api/v1 api healthy server/index.js
USE /api/v1/dashboard api healthy server/index.js
USE /api/v1/tasks api healthy server/index.js
USE /api/v1/shopping api healthy server/index.js
USE /api/v1/meals api healthy server/index.js
USE /api/v1/recipes api healthy server/index.js
USE /api/v1/calendar api healthy server/index.js
USE /api/v1/notes api healthy server/index.js
USE /api/v1/contacts/cardav api healthy server/index.js
USE /api/v1/contacts api healthy server/index.js
USE /api/v1/birthdays api healthy server/index.js
USE /api/v1/budget api healthy server/index.js
USE /api/v1/documents api healthy server/index.js
USE /api/v1/split-expenses api healthy server/index.js
USE /api/v1/weather api healthy server/index.js
USE /api/v1/preferences api healthy server/index.js
USE /api/v1/reminders api healthy server/index.js
USE /api/v1/search api healthy server/index.js
USE /api/v1/family api healthy server/index.js
USE /api/v1/backup api healthy server/index.js
USE /api/v1/housekeeping api healthy server/index.js
USE /api/v1/modules api healthy server/index.js
GET /health api healthy server/index.js
GET /{*path} api healthy server/index.js
GET /dashboard api healthy server/routes/housekeeping.js
GET /task-templates api healthy server/routes/housekeeping.js
GET /worker api healthy server/routes/housekeeping.js
GET /workers api healthy server/routes/housekeeping.js

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
auth::test/test-installer-schema.js security healthy test/test-installer-schema.js
auth::public/pages/login.js security healthy public/pages/login.js
auth::tools/installer/locales/cli/ja.sh security healthy tools/installer/locales/cli/ja.sh
auth::tools/installer/locales/uk.json security healthy tools/installer/locales/uk.json
auth::tools/installer/locales/en.json security healthy tools/installer/locales/en.json
auth::tools/installer/locales/hi.json security healthy tools/installer/locales/hi.json
auth::tools/installer/locales/ar.json security healthy tools/installer/locales/ar.json
auth::tools/installer/locales/fr.json security healthy tools/installer/locales/fr.json
auth::tools/installer/locales/cli/en.sh security healthy tools/installer/locales/cli/en.sh
auth::tools/installer/locales/cs.json security healthy tools/installer/locales/cs.json
auth::tools/installer/locales/de.json security healthy tools/installer/locales/de.json
auth::tools/installer/locales/pl.json security healthy tools/installer/locales/pl.json
auth::tools/installer/locales/cli/hi.sh security healthy tools/installer/locales/cli/hi.sh
auth::server/auth.js security healthy server/auth.js
auth::tools/installer/locales/cli/ar.sh security healthy tools/installer/locales/cli/ar.sh
auth::tools/installer/locales/pt.json security healthy tools/installer/locales/pt.json
auth::package.json security healthy package.json
auth::tools/installer/locales/cli/es.sh security healthy tools/installer/locales/cli/es.sh
auth::tools/installer/locales/sv.json security healthy tools/installer/locales/sv.json
auth::tools/installer/locales/zh.json security healthy tools/installer/locales/zh.json
auth::tools/installer/env-schema.js security healthy tools/installer/env-schema.js
auth::tools/installer/locales/nl.json security healthy tools/installer/locales/nl.json
auth::tools/installer/locales/cli/tr.sh security healthy tools/installer/locales/cli/tr.sh
auth::tools/installer/locales/es.json security healthy tools/installer/locales/es.json
auth::tools/installer/locales/cli/pt.sh security healthy tools/installer/locales/cli/pt.sh
auth::server/openapi.js security healthy server/openapi.js
auth::server/services/google-calendar.js security healthy server/services/google-calendar.js
auth::server/db.js security healthy server/db.js
auth::tools/installer/locales/cli/uk.sh security healthy tools/installer/locales/cli/uk.sh
auth::tools/installer/locales/cli/fr.sh security healthy tools/installer/locales/cli/fr.sh
auth::tools/installer/locales/cli/sv.sh security healthy tools/installer/locales/cli/sv.sh
auth::tools/installer/locales/cli/el.sh security healthy tools/installer/locales/cli/el.sh
auth::server/services/oidc.js security healthy server/services/oidc.js
auth::tools/installer/locales/cli/ru.sh security healthy tools/installer/locales/cli/ru.sh
auth::tools/installer/locales/el.json security healthy tools/installer/locales/el.json
auth::tools/installer/locales/ru.json security healthy tools/installer/locales/ru.json
auth::tools/installer/locales/cli/de.sh security healthy tools/installer/locales/cli/de.sh
auth::tools/installer/locales/cli/it.sh security healthy tools/installer/locales/cli/it.sh
auth::tools/installer/locales/cli/nl.sh security healthy tools/installer/locales/cli/nl.sh
auth::tools/installer/locales/cli/pl.sh security healthy tools/installer/locales/cli/pl.sh
auth::server/routes/calendar.js security healthy server/routes/calendar.js
auth::tools/installer/locales/tr.json security healthy tools/installer/locales/tr.json
auth::tools/installer/locales/it.json security healthy tools/installer/locales/it.json
auth::tools/installer/locales/cli/cs.sh security healthy tools/installer/locales/cli/cs.sh
auth::.env.example security healthy .env.example
auth::tools/installer/locales/cli/zh.sh security healthy tools/installer/locales/cli/zh.sh
auth::tools/installer/locales/ja.json security healthy tools/installer/locales/ja.json
auth::test/test-installer-prereq.js security healthy test/test-installer-prereq.js
auth::test/test-oidc.js security healthy test/test-oidc.js
auth::public/pages/settings.js security healthy public/pages/settings.js

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
password_literal::setup.js security healthy setup.js
password_literal::setup.js security healthy setup.js
password_literal::test/test-setup.js security healthy test/test-setup.js
password_literal::test/test-setup.js security healthy test/test-setup.js
password_literal::test/test-setup.js security healthy test/test-setup.js
password_literal::test/test-setup.js security healthy test/test-setup.js
password_literal::test/test-setup.js security healthy test/test-setup.js
password_literal::test/test-carddav.js security healthy test/test-carddav.js
password_literal::test/test-carddav.js security healthy test/test-carddav.js
password_literal::test/test-carddav.js security healthy test/test-carddav.js
password_literal::test/test-carddav.js security healthy test/test-carddav.js
password_literal::test/test-carddav.js security healthy test/test-carddav.js
password_literal::test/test-carddav.js security healthy test/test-carddav.js
password_literal::test/test-carddav.js security healthy test/test-carddav.js
password_literal::tools/installer/locales/cli/el.sh security healthy tools/installer/locales/cli/el.sh
password_literal::tools/installer/locales/cli/zh.sh security healthy tools/installer/locales/cli/zh.sh
password_literal::tools/installer/locales/cli/ar.sh security healthy tools/installer/locales/cli/ar.sh
password_literal::tools/installer/locales/cli/ru.sh security healthy tools/installer/locales/cli/ru.sh
password_literal::tools/installer/locales/cli/pt.sh security healthy tools/installer/locales/cli/pt.sh
password_literal::tools/installer/locales/cli/uk.sh security healthy tools/installer/locales/cli/uk.sh
password_literal::tools/installer/locales/cli/nl.sh security healthy tools/installer/locales/cli/nl.sh
password_literal::tools/installer/locales/cli/en.sh security healthy tools/installer/locales/cli/en.sh
password_literal::tools/installer/locales/cli/en.sh security healthy tools/installer/locales/cli/en.sh
password_literal::tools/installer/locales/cli/en.sh security healthy tools/installer/locales/cli/en.sh
password_literal::tools/installer/locales/cli/de.sh security healthy tools/installer/locales/cli/de.sh
password_literal::tools/installer/locales/cli/hi.sh security healthy tools/installer/locales/cli/hi.sh
password_literal::tools/installer/locales/cli/fr.sh security healthy tools/installer/locales/cli/fr.sh
password_literal::tools/installer/locales/cli/it.sh security healthy tools/installer/locales/cli/it.sh
password_literal::tools/installer/locales/cli/it.sh security healthy tools/installer/locales/cli/it.sh
password_literal::tools/installer/locales/cli/tr.sh security healthy tools/installer/locales/cli/tr.sh
password_literal::tools/installer/locales/cli/es.sh security healthy tools/installer/locales/cli/es.sh
password_literal::tools/installer/locales/cli/sv.sh security healthy tools/installer/locales/cli/sv.sh
password_literal::tools/installer/locales/cli/cs.sh security healthy tools/installer/locales/cli/cs.sh
password_literal::tools/installer/locales/cli/ja.sh security healthy tools/installer/locales/cli/ja.sh
password_literal::tools/installer/locales/cli/pl.sh security healthy tools/installer/locales/cli/pl.sh

LabelLayerStatusPath
127.0.0.1 network healthy podman-compose.yml
172.16.0.0 network healthy .env.example
10.0.0.0 network healthy .env.example
192.168.1.42 network healthy scripts/seed-demo.js
424.272.795.652 network healthy public/lucide.min.js
46.1.92.32 network healthy public/lucide.min.js
411.198.727.585 network healthy public/lucide.min.js
13.88.7.71 network healthy public/lucide.min.js
3.2.6.4 network healthy public/lucide.min.js
8.2.2.5 network healthy public/lucide.min.js
23.07.42.42 network healthy public/lucide.min.js
4.2.8.3 network healthy public/lucide.min.js
5.18.85.28 network healthy public/lucide.min.js
1.37.46.06 network healthy public/lucide.min.js
4.5.8.8 network healthy public/lucide.min.js
4.08.04.3 network healthy public/lucide.min.js
35.43.96.4 network healthy public/lucide.min.js
43.35.4.96 network healthy public/lucide.min.js
5.18.85.55 network healthy public/lucide.min.js
3.5.7.7 network healthy public/lucide.min.js
5.38.8.97 network healthy public/lucide.min.js
3.4.5.8 network healthy public/lucide.min.js
412.104.802.292 network healthy public/lucide.min.js
55.28.9.84 network healthy public/lucide.min.js
42.22.78.55 network healthy public/lucide.min.js
3.4.8.5 network healthy public/lucide.min.js
2.3.2.7 network healthy public/lucide.min.js
4.929.707.707 network healthy public/lucide.min.js
27.1.8.53 network healthy public/lucide.min.js
5.636.707.707 network healthy public/lucide.min.js
17.657.707.707 network healthy public/lucide.min.js
55.47.98.97 network healthy public/lucide.min.js
3.29.87.78 network healthy public/pages/settings.js

LabelLayerStatusPath
test software healthy test
docs software healthy docs
archive software healthy docs/archive
designs software healthy docs/archive/designs
design software healthy docs/design
awesome-selfhosted software healthy docs/awesome-selfhosted
scripts software healthy scripts
deploy software healthy deploy
truenas software healthy deploy/truenas
templates software healthy deploy/truenas/templates
test_values software healthy deploy/truenas/templates/test_values
server software healthy server
middleware software healthy server/middleware
routes software healthy server/routes
services software healthy server/services
tools software healthy tools
installer software healthy tools/installer
locales software healthy tools/installer/locales
cli software healthy tools/installer/locales/cli
public software healthy public
utils software healthy public/utils
components software healthy public/components
locales software healthy public/locales
pages software healthy public/pages
styles software healthy public/styles
.github software healthy .github
ISSUE_TEMPLATE software healthy .github/ISSUE_TEMPLATE
workflows software healthy .github/workflows

LabelLayerStatusPath
/settings frontend healthy public/pages/settings.js
/setup frontend healthy public/pages/setup.js
/housekeeping frontend healthy public/pages/housekeeping.js
/shopping frontend healthy public/pages/shopping.js
/documents frontend healthy public/pages/documents.js
/recipes frontend healthy public/pages/recipes.js
/split-expenses frontend healthy public/pages/split-expenses.js
/dashboard frontend healthy public/pages/dashboard.js
/login frontend healthy public/pages/login.js
/meals frontend healthy public/pages/meals.js
/birthdays frontend healthy public/pages/birthdays.js
/tasks frontend healthy public/pages/tasks.js
/notes frontend healthy public/pages/notes.js
/contacts frontend healthy public/pages/contacts.js
/calendar frontend healthy public/pages/calendar.js
/budget frontend healthy public/pages/budget.js
/api/v1/auth/setup frontend healthy tools/installer/install-server.js
/ frontend healthy public/router.js

LabelLayerStatusPath
CustomEvent software healthy test/test-api.js:CustomEvent
teacher software healthy scripts/seed-demo.js:teacher
BetterSQLiteStore software healthy server/auth.js:BetterSQLiteStore
ApiError software healthy public/api.js:ApiError
on software healthy public/utils/sub-tabs.js:on
OikosInstallPrompt software healthy public/components/oikos-install-prompt.js:OikosInstallPrompt
OikosLocalePicker software healthy public/components/oikos-locale-picker.js:OikosLocalePicker

LabelLayerStatusPath
gha::claude-code-review cicd healthy .github/workflows/claude-code-review.yml
gha::docker-publish cicd healthy .github/workflows/docker-publish.yml
gha::ci cicd healthy .github/workflows/ci.yml
gha::claude cicd healthy .github/workflows/claude.yml
gha::truenas-publish cicd healthy .github/workflows/truenas-publish.yml

LabelLayerStatusPath
claude-review cicd healthy .github/workflows/claude-code-review.yml
build-and-push cicd healthy .github/workflows/docker-publish.yml
test cicd healthy .github/workflows/ci.yml
claude cicd healthy .github/workflows/claude.yml
publish cicd healthy .github/workflows/truenas-publish.yml

LabelLayerStatusPath
CLAUDE_CODE_OAUTH_TOKEN cicd healthy —
TRUENAS_FORK_TOKEN cicd healthy —
GITHUB_TOKEN cicd healthy —
REGISTRY cicd healthy —
IMAGE_NAME cicd healthy —

LabelLayerStatusPath
port:3000 network healthy Dockerfile
port:568 network healthy entrypoint.sh
port:13099 network healthy test/test-setup.js
port:8090 network healthy tools/installer/install-server.js

LabelLayerStatusPath
caddy network healthy .env.example
nginx network healthy .env.example
traefik network healthy .env.example

LabelLayerStatusPath
image::Dockerfile hardware healthy Dockerfile
oikos hardware healthy docker-compose.yml

LabelLayerStatusPath
vps::gcp hardware healthy package-lock.json
vps::droplet hardware healthy public/lucide.min.js

LabelLayerStatusPath
repobility-clone-jt63f5m9 software healthy /tmp/repobility-clone-jt63f5m9

LabelLayerStatusPath
sqlite data healthy package.json
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/c293919d-235d-4152-bd13-8c803fa69eb1/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/c293919d-235d-4152-bd13-8c803fa69eb1/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.